Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
File: kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft (raw, json)
Hash identifier: th7Khq+MXcxmG54P8RLfoug+oIkUMaYOQDIBmTsZ92E=
Subject key identifier: A6:F5:B5:24:34:9A:16:6D:6C:D5:8D:AF:1F:07:21:D5:75:A3:B7:5B
Authority key identifier: 92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF
Certificate issuer: /CN=92214a90d4095fd26765cc0e4df899e8c46c06df
Certificate serial: 019D39E592C6BCF6C616B097AB271CE7B9A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
Manifest number: 158C
Signing time: Sun 29 Mar 2026 14:00:39 +0000
Manifest this update: Sun 29 Mar 2026 14:00:39 +0000
Manifest next update: Mon 30 Mar 2026 14:00:39 +0000
Files and hashes: 1: 7Na1prGJ4FkiFdW0x9CfNk6_xWg.roa (hash: +rpN0xtGV1MKYV/A1+8x9wSd5PmNaR+b6CBOkrX1H6A=)
2: kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl (hash: AvD/8CHMqzo90LZEVNZDGR0b4Eh7jL/h3wcl+9cI1NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:92:c6:bc:f6:c6:16:b0:97:ab:27:1c:e7:b9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92214a90d4095fd26765cc0e4df899e8c46c06df
Validity
Not Before: Mar 29 14:00:39 2026 GMT
Not After : Mar 30 14:00:39 2026 GMT
Subject: CN=a6f5b524349a166d6cd58daf1f0721d575a3b75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f1:50:33:b1:a6:d8:94:ef:8d:9f:e9:50:b8:
69:75:a9:a7:fc:4c:54:63:63:0b:f5:80:3d:9f:1f:
a4:bc:9a:3b:07:b7:5d:b1:8c:10:f9:50:28:97:24:
db:87:e7:70:97:1f:bc:e2:58:2d:6a:12:f0:56:0d:
a2:90:a8:93:07:b5:49:a0:2e:3c:29:9f:e9:68:c1:
3b:b1:b6:44:8b:35:94:95:22:53:0f:d9:c5:a8:9c:
bd:6c:e2:8b:6f:f5:72:75:11:1c:3b:2d:4d:35:ea:
0e:bb:24:25:55:63:91:9b:a9:6c:15:0b:ab:25:af:
b6:e7:92:3d:64:ca:ca:b2:4f:9c:0a:74:2a:65:16:
07:f3:6a:2b:7f:2d:00:ab:b2:84:df:4d:db:a5:7e:
21:49:53:05:ec:3f:4b:02:00:a7:81:d8:6c:58:14:
d9:b2:2a:c3:35:ee:f9:ea:d4:b2:2f:de:82:fc:47:
8c:96:1b:93:ab:9e:b4:58:81:df:c7:1b:59:7b:59:
d3:91:11:e2:23:b8:10:b5:d3:06:57:52:eb:dd:f1:
b8:f6:a1:e5:2a:71:fb:17:28:8a:40:e1:fc:f6:eb:
ce:99:87:f9:57:15:26:45:4f:ef:50:d0:61:93:27:
14:7a:b4:00:9d:87:ed:d3:ae:69:be:61:c8:39:aa:
c3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F5:B5:24:34:9A:16:6D:6C:D5:8D:AF:1F:07:21:D5:75:A3:B7:5B
X509v3 Authority Key Identifier:
keyid:92:21:4A:90:D4:09:5F:D2:67:65:CC:0E:4D:F8:99:E8:C4:6C:06:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/9ae9ad-6a8c-47cb-bdd1-57d8030b61e1/1/kiFKkNQJX9JnZcwOTfiZ6MRsBt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:3a:a4:bf:d1:72:9b:1d:4a:ef:b0:d3:63:66:b6:8d:ea:8d:
12:45:9b:02:76:f0:0c:75:5d:34:10:75:ae:71:ad:4d:fa:9b:
49:d4:ac:de:cd:6f:7a:53:d8:ef:31:ad:85:43:1e:30:b1:5b:
85:8e:20:b0:b4:b0:be:f7:f8:0e:bc:ea:9e:0c:e9:7a:86:bb:
d0:20:a3:8f:fb:a9:68:7a:b6:00:f1:72:7b:44:07:a0:c7:c6:
a7:62:f5:37:b2:63:2f:21:56:9c:08:0d:04:d0:cf:5c:41:2c:
90:50:37:2c:c7:1c:b2:80:9d:13:9c:3a:c9:a7:a5:86:43:e4:
3e:ed:57:a2:75:3a:b0:9a:85:03:9b:ce:82:11:7e:f8:b6:ac:
f9:35:d9:f8:6f:b5:d5:b3:f6:2a:30:88:b2:4f:ad:5d:21:de:
31:2e:40:2e:37:19:a3:27:84:ff:09:a6:46:8f:f5:17:f9:f8:
73:94:ac:71:4c:6a:f8:af:a2:ba:55:30:8a:3b:c2:b6:70:32:
0a:19:b8:c3:d9:1f:c7:87:35:29:a0:70:2c:e7:b3:eb:6d:fd:
24:aa:a7:70:be:5f:c6:5b:7f:97:7f:4b:03:52:f7:2c:05:40:
34:f1:b2:36:73:bc:38:4b:87:7b:20:3a:20:8a:60:3d:48:af:
06:b8:76:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:09 2026 by rpki-client